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AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows. 

1 . (Currently Amended) A method of managing resources, said method comprising: 

accessing a list of resources, wherein a resource comprises an object defined by a service 
type and wherein a resource is identifiable by a resource name; 

comparing a first resource name for a first resource to a second resource name for a 
second resource to identify a relationship between said first and second resources 
wherein said relationship is based on said first resource name and said second 
resource name and wherein said relationship determines that the second resource 
is a sub-resource of the first resource; and 

representing said first and second resources in a hierarchical organization reflecting said 
relationship, wherein said hierarchical organization comprises a top-level 
resource name and a plurality of sub-resource names corresponding to said top 
level resource name, wherein said plurality of sub-resource names comprises said 
top-level resource name and an additional name portion separated from said top- 
level resource name by a delimiter; 

intercepting a request identifying a resource; and 

locating said resource in said hierarchical organization, wherein said resource is subject 
to a policy definition governing access to said resource, wherein the policy 
definition comprises: 

a rule that references said resource and comprises at least one action 

associated with the resource, 
a condition that comprises a constraint on the at least one action, 
a subject that defines a collection of users to whom the policy definition 
a pplies, and 

a referral that comprises an identification of a second policy decision 
point to which the evaluation of the policy definition is being 
delegated . 

2. (Canceled) 

3. (Original) The method of claim 1 , further comprising: 

listing said resources in order according to their respective relationships. 
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4. (Previously Presented) The method of claim 1, wherein a resource name comprises a 
plurality of components, wherein one component is separated from another component by 
said delimiter. 

5. (Original) The method of claim 4, wherein said comparing comprises: 

receiving information identifying what is used as said delimiter. 

6. (Original) The method of claim 4, wherein said comparing comprises: 

receiving information for wildcard pattern matching of resource names. 

7. (Original) The method of claim 4, wherein said comparing comprises: 

receiving information indicating whether a resource name is case-sensitive. 

8. (Original) The method of claim 1, wherein one of said first and second resources is 
identified as a sub-source of the other. 

9. (Currently Amended) A computer system comprising: 

a memory unit; and 

a processor coupled to said memory unit, said processor for executing a method of 
managing resources, said method comprising: 

receiving a listing of resources, wherein a resource comprises an object defined by a 
service type and wherein a resource is identifiable by a resource name; 

determining a relationship between a first resource and a second resource by comparing 
their resource names, wherein said relationship determines that the second 
resource is a sub-resource of the first resource; and 

arranging said first and second resources in a hierarchical organization reflecting said 
relationship, wherein said hierarchical organization comprises a top-level 
resource name and a plurality of sub-resource names corresponding to said top 
level resource name, wherein said plurality of sub-resource names comprises said 
top-level resource name and an additional name portion separated from said top- 
level resource name by a delimiter; 

intercepting a request identifying a resource: and 
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traversing said hierarchical organization to locate said resource, wherein said resource is 
subject to a policy definition governing access to said resource, wherein the 
policy definition comprises: 

a rule that references said resource and comprises at least one action 

associated with the resource, 
a condition that comprises a constraint on the at least one action, 
a subject that defines a collection of users to whom the policy definition 
applies, and 

a referral that comprises an identification of a second policy decision 
point to which the evaluation of the policy definition is being 
delegated . 

10. (Canceled) 

1 1 . (Previously Presented) The computer system of claim 9, wherein a resource name comprises 
a plurality of components, wherein one component is separated from another component by 
said delimiter. 

12. (Original) The computer system of claim 11, wherein said determining comprises: 

identifying a character type used as said delimiter. 

13. (Original) The computer system of claim 1 1, wherein said determining comprises: 

identifying wildcard pattern used for comparing resource names. 

14. (Original) The computer system of claim 1 1, wherein said determining comprises: 

indicating whether a resource name is case-sensitive. 

15. (Canceled) 

16. (Currently Amended) A computer-usable medium having computer-readable program code 
embodied therein for causing a computer system to perform a method of managing 
resources, said method comprising: 

accessing a list of resources, wherein a resource comprises an object defined by a service 
type and wherein a resource is identifiable by a resource name; 
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comparing a first resource name for a first resource to a second resource name for a 
second resource to identify a relationship between said first and second resources 
wherein said relationship is based on first resource name and said second 
resource name and wherein said relationship determines that the second resource 
is a sub-resource of the first resource; and 

representing said first and second resources in a hierarchical organization reflecting said 
relationship, wherein said hierarchical organization comprises a top-level 
resource name and a plurality of sub-resource names corresponding to said top 
level resource name, wherein the plurality of sub-resource names comprises said 
top-level resource name and an additional name portion separated from said top- 
level resource name by a delimiter; 

intercepting a request identifying a resource; and 

locating said resource in said hierarchical organization, wherein said resource is subject 
to a policy definition governing access to said resource, wherein the policy 
definition comprises: 

a rule that references said resource and comprises at least one action 

associated with the resource, 
a condition that comprises a constraint on the at least one action, 
a subject that defines a collection of users to whom the policy definition 
applies, and 

a referral that comprises an identification of a second policy decision 
point to which the evaluation of the policy definition is being 
delegated . 

17. (Canceled) 

18. (Original) The computer-usable medium of claim 16 wherein said computer-readable 
program code embodied therein causes said computer system to perform said method further 
comprising: 

listing said resources in order according to their respective relationships. 

19. (Previously Presented) The computer-usable medium of claim 16 wherein a resource name 
comprises a plurality of components, wherein one component is separated from another 
component by said delimiter. 
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20. (Original) The computer-usable medium of claim 19, wherein said computer-readable 
program code embodied therein causes said computer system to perform said method further 
comprising: 

receiving information identifying what is used as said delimiter. 

21. (Original) The computer-usable medium of claim 19, wherein said computer-readable 
program code embodied therein causes said computer system to perform said method further 
comprising: 

receiving information for wildcard pattern matching of resource names. 

22. (Original) The computer-usable medium of claim 19, wherein said computer-readable 
program code embodied therein causes said computer system to perform said method further 
comprising: 

receiving information indicating whether a resource name is case-sensitive. 

23. (Original) The computer-usable medium of claim 16 wherein one of said first and second 
resources is identified as a sub-resource of the other. 

24. (Currently Amended) A method of managing resources, said method comprising: 

accessing a list of resources, wherein a resource comprises an object defined by a service 
type and wherein a resource is identifiable by a resource name having a number 
of name components, wherein said number of name components are separated by 
delimiters; 

comparing a name component of a first resource name to a name component of a second 
resource name to identify a relationship between a first resource and a second 
resource, wherein said relationship determines that the second resource is a sub- 
resource of the first resource; 

organizing said first and second resource names in a hierarchical structure according to 
said relationship, wherein said hierarchical structure comprises a top-level 
resource name and a plurality of sub-resource names corresponding to said top 
level resource name, wherein said plurality of sub-resource names comprises said 
top-level resource name and an additional name portion separated from said top- 
level resource name by a delimiter; 

intercepting r e c e iving a request for access to said resource; and 
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locating said resource in said hierarchical structure; wherein said resource is subject to a 
policy definition governing access to said resource, wherein the policy definition 
comprises: 

a rule that references said resource and comprises at least one action 

associated with the resource, 
a condition that comprises a constraint on the at least one action, 
a subject that defines a collection of users to whom the policy definition 

applies, and 

a referral that comprises an identification of a second policy decision 
point to which the evaluation of the policy definition is being 
delegated . 

25. (Original) The method of claim 24, wherein said comparing comprises: 

receiving information identifying a character used as said delimiter. 

26. (Original) The method of claim 24, wherein said comparing comprises: 

receiving information for wildcard pattern matching of resource names. 

27. (Original) The method of claim 24, wherein said comparing comprises: 

receiving information indicating whether said resource name is case-sensitive. 

28. (Currently Amended) The method of claim 2, further comprising: 

forwarding the request identifying the resource from a first policy decision point to [[a]] 
the second policy decision point for evaluation. 

29. (Previously Presented) The method of claim 2, further comprising: 

storing the policy decision in a cache, wherein the policy decision is used to evaluate a 
subsequent request for said resource. 
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